SecOps

Course Overview

What is Chronicle?

How to configure IdPs

RBAC

Rules

Rules Engine

Detection API

Rule Detection View

Responding to threats with SOAR

Chronicle & Siemplify Integration

Ways to investigate a threat

Chronicle Search UI

Building a YARA-L rule

Methods of ingesting data into Chronicle

Collecting Data

Parsing data

Dashboard Views

Looker - Overview

Looker Demo

Evaluation